← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-63050
WordPress REHub Framework plugin < 19.9.9.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-63048
WordPress ListingPro Lead Form plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-63036
WordPress Ronneby Theme Core plugin <= 1.5.68 - Local File Inclusion vulnerability
CVE-2025-63026
WordPress Grand Restaurant Theme Elements for Elementor plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-63028
WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability
CVE-2025-63027
WordPress WBC907 Core plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-63021
WordPress Valenti Engine plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62094
WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62093
WordPress Image&Video FullScreen Background plugin <= 1.6.7 - SQL Injection vulnerability
CVE-2025-62045
WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Local File Inclusion vulnerability